Logging In to the NAM with Cisco IOS Software

The NAM has two user levels with different access privileges:

•Guest—Read-only CLI access (default password is guest)

•Root—Full read-write access (default password is cisco)

Note The root account uses the # prompt; the guest account uses the > prompt. The default root and guest passwords for the maintenance image is cisco if the NAM is the WS-SVC-NAM-1, WS-VC-AM-1-250S, WS-SVC-NAM-2, or WS-SC-NAM-2-250S module.

Note The guest account in the NAM maintenance image has all read and all write privileges.

When you boot into either the application image or the maintenance image and set up IP information, that information is synchronized between the images. If you change passwords, that information is not synchronized between the images and is not reflected on the unchanged image.

To allow remote Telnet sessions, use the exsession on command. SSH can also be used to log into the NAM. You must install the crypto patch to use this feature. To enable SSH on the NAM, use the exsession on ssh command.

To log in to the NAM, follow these steps:

Step 1 Log in to the switch using the Telnet connection or the console port connection.

Step 2 At the CLI prompt, establish a console session with the NAM using the sessionslot slot_number processor1 command, as follows:

Router# sessionslot8 processor 1

The default escape character is Ctrl-^, then x.

You can also type 'exit' at the remote prompt to end the session

Trying 127.0.0.81 ... Open

Cisco Network Analysis Module (WS-SVC-NAM-1)

Step 3 At the NAM login prompt, type root to log in as the root user or guest to log in as a guest user.

login: root

Step 4 At the password prompt, enter the password for the account. The default password for the root account is "root" and the default password for the guest account is "guest."

Password:

After a successful login, the command line prompt appears as follows:

Network Analysis Module (WS-SVC-NAM-1) Console, 5.1

Copyright (c) 1999-2011 by cisco Systems, Inc.

WARNING! Default password has not been changed!

root@localhost#

Changing the NAM CLI Passwords with Cisco IOS Software

If you have not changed the password from the factory-set default, a warning message displays when you log in to the NAM.

You can use the web application on the local database. If the administrator is unknown, you can use the CLI to remove the local web users from the web user database with the rmwebusers command.

Note Passwords are case-sensitive. New passwords may include uppercase and lowercase letters, numbers, and punctuation marks.

Note For the WS-SVC-NAM-1 and WS-SVC-NAM-2 module, if the NAM maintenance image passwords are lost for the root or guest account, the maintenance image must be upgraded. After the upgrade, the passwords are set to the default. See Table 4-1.

To change the password, follow these steps while you are logged in to the root account on the NAM:

Step 1 Enter this command as follows:

root@localhost# password username

To change the root password, make a Telnet connection to the NAM and then use the password root command.

To change the guest password, make a Telnet connection to the NAM and then use the password guest command.

Step 2 Enter the new password as follows:

Changing password for user root

New UNIX password:

Step 3 Enter the new password again as follows:

Retype new UNIX password:

passwd: all authentication tokens updated successfully

This example shows how to set the password for the root account:

root@localhost# password root

Changing password for user root

New UNIX password:

Retype new UNIX password:

passwd: all authentication tokens updated successfully

If you forget or lose the password, you can enter the clear module pc-module module-number password command from the switch CLI to restore the password for the root account to root and the guest account to guest on the application image.

Resetting the NAM with Cisco IOS Software

If you cannot reach the NAM through the CLI or an external Telnet session, enter the hw-module modulemodule_numberreset command to reset and reboot the NAM. The reset process requires several minutes.

When the NAM initially boots, by default it runs a partial memory test. To perform a full memory test, use the mem-test-full keyword in the hw-module module module_numberreset device:partition mem-test-full command.

When you next reset the NAM, the full memory test runs. A full memory test takes more time to complete than a partial memory test.

You can also use the hw-module module module_number mem-test-full command to run a memory test. This example shows a full memory test for module 5:

Router(config)# hw-module module 5 boot-device mem-test-full

To reset the module and boot the NAM in the application image, use the hw-module module slot resethdd:1 [mem-test-full]command from the Cisco IOS CLI prompt.

To reset the module and boot the NAM in the maintenance image, use the hw-module module slot resetcf:1 [mem-test-full]command from the Cisco IOS CLI prompt.

This example shows how to reset the NAM that is installed in slot 9 from the CLI:

Router# hw-module mod 9 reset cf:1 memtest-full

Proceed with reload of module? [confirm] y

% reset issued for module 9

To enable a full memory test, use the set boot device bootseq mod# mem-test-full command. This example shows how to do a full memory test:

Upgrading the NAM Application Software with Cisco IOS Software

Step 2 Log in to the switch through the console port or through a Telnet session.

Step 3 If the NAM is running in the maintenance image, go to Step 4. If the NAM is not running in the maintenance image, enter this command in privileged mode:

Router# hw-module module 9 reset cf:1

Device BOOT variable for reset = cf:1

Warning:Device list is not verified.

Proceed with reload of module? [confirm]

% reset issued for module 9

Router#

00:03:31:%SNMP-5-MODULETRAP:Module 9 [Down] Trap

00:03:31:SP:The PC in slot 9 is shutting down. Please wait ...

00:03:41:%SNMP-5-COLDSTART:SNMP agent on host R1 is undergoing a cold

start

00:03:46:SP:PC shutdown completed for module 9

00:03:46:%C6KPWR-SP-4-DISABLED:power to module in slot 9 set off (admin

request)

00:03:49:SP:Resetting module 9 ...

00:03:49:%C6KPWR-SP-4-ENABLED:power to module in slot 9 set on

00:05:53:%SNMP-5-MODULETRAP:Module 9 [Up] Trap

00:05:53:%DIAG-SP-6-BYPASS:Module 9:Online Diagnostics is Bypassed

00:05:53:%OIR-SP-6-INSCARD:Card inserted in slot 9, interfaces are now

online

Router#

Step 4 After the NAM is back online, establish a console session with the NAM and log in to the root account.

Router# session slot 9 proc 1

The default escape character is Ctrl-^, then x.

You can also type 'exit' at the remote prompt to end the session

Trying 127.0.0.91 ... Open

Cisco Network Analysis Module (WS-SVC-NAM-1)

Maintenance Partition

login:root

Password:

Network Analysis Module (WS-SVC-NAM-1) Console, 5.1

Copyright (c) 1999-2011 by cisco Systems, Inc.

Step 5 Upgrade the NAM application software as follows:

root@localhost# upgrade ftp-url

where ftp-url is the FTP location and name of the NAM software image file

or

root@localhost# upgrade ftp-url --install

Note The --install keyword clears and recreates all of the NAM partitions; this action is similar to restoring the factory-default state. If you use the --install keyword, the previously stored reports and data (if any) will be lost.

Note If the FTP server does not allow anonymous users, use this syntax for the ftp-url value: ftp://user@host/absolute-path/filename. Enter your password when prompted.

Step 6 Follow the screen prompts during the upgrade.

Step 7 After completing the upgrade, log out of the NAM.

Step 8 Reset the NAM as follows:

Router# hw-module mod 9 reset hdd:1

Device BOOT variable for reset =

Warning:Device list is not verified.

Proceed with reload of module? [confirm]

% reset issued for module 9

Router#

00:26:55:%SNMP-5-MODULETRAP:Module 9 [Down] Trap

00:26:55:SP:The PC in slot 8 is shutting down. Please wait ...

Note For optimal performance on the NAM, you must use an additional one-time reboot immediately after booting to the application partition after you upgrade the NAM software.

Step 9 (Optional) Verify the initial configuration after the NAM comes back online by logging into the NAM root account as follows: